stockburn[.]cc

stockburn.cc is currently hosting a fraudulent USDT airdrop page titled "Claim Your Goreloptam USDT Airdrop Now | Web3 Rewards Guide". The site is served over HTTPS with a Let’s Encrypt certificate (CN=E7) and resolves to the Cloudflare edge address 104.21.78.98, which geolocates to Canada. Registration data shows the domain was created on 15 May 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is using the Cloudflare nameservers jessica.ns.cloudflare.com and will.ns.cloudflare.com. Automated analysis classifies the page as an "Airdrop Scam" and the underlying kit matches known airdrop‑scam templates. The domain appears on two public blocklists, has been blocked by PhishDestroy and ScamSniffer, and receives a Gridinsoft trust score of 0/100. VirusTotal reports four of ninety‑two scanners flagging the host, and an AlienVault OTX pulse records a single observation of the domain. While the exact phishing landing flow has not been captured, the presence of the airdrop claim wording, the low trust score, and multiple blocklist listings provide strong evidence of malicious intent. Defenders should block DNS resolution for stockburn.cc, monitor outbound connections to its IP address, and add the domain to local threat intel feeds. Continued observation is advised to detect any evolution of the campaign.